Claims 



What is claimed is: 



1 LA method for associating events, comprising the steps of: 

2 providing an event dataset that includes a plurality of events occurring in each of N 

3 successive time intervals, said 3 ; 

4 deducing from the event dataset a plurality of association rules, each association rule E K 

5 =>E L of the plurality of association rules expressing an association between events E K and E L 

6 respectively occurring in two successive time intervals of the N time intervals, said events E K and 

7 E L being in the event dataset; 

8 generating a plurality of sequences of events, each sequence of the plurality of sequences 

9 being generated from at least two sequentially ordered association rules of the plurality of 

1 0 association rules; 

1 1 forming a plurality of clusters from the plurality of sequences in accordance with a 

12 clustering algorithm, each cluster of the plurality of clusters including at least two sequences of 

13 the plurality of sequences; and 

14 creating S c sequences of clusters from the plurality of clusters, said S c ^ 1, each sequence 

15 of the S c sequences including at least two clusters of the plurality of clusters. 
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2. The method of claim 1, said method further comprising after the creating step: using at least 
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2 one sequence of the S c sequences to identify at least one event occurring in a first time interval of 

3 the N time intervals as being a probable cause of at least one event occurring in a later-occurring 

4 time interval of the N time intervals. 

1 3. The method of claim 1, said method further comprising after the creating step: using a first 

2 sequence of the S c sequences to predict an occurrence of at least one event in a time interval 

3 occurring after the N time intervals, wherein the at least one event had occurred within the N 

4 time intervals. 

1 4. The method of claim 1, wherein each pair of sequentially ordered association rules of the 

2 plurality of association rules consists of a first association rule and a second association rule, and 

3 wherein the first association rule and the second association rule are independent of each other. 

1 5. The method of claim 1 , wherein the association rules from which a first sequence of the 

2 plurality of sequences has been generated include a pair of consecutively ordered first and second 

3 association rules which are not independent of each other. 

1 6. The method of claim 1, wherein the N time intervals are contiguously sequenced. 

1 7. The method of claim 1, wherein the N time intervals are not contiguously sequenced. 
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1 8. The method of claim 1, wherein each sequence of the plurality of sequences is of the form E, 

2 -+ E 2 -> E 3 E,., E, in relation to sequentially ordered association rules Ej =* E 2 , E 2 => 

3 E 3 ,..., Ej.j => E, of the plurality of association rules, and wherein 1^3. 

1 9. The method of claim 1, wherein said each association rule satisfies a condition of a <, P KL < 1, 

2 wherein P KL is the probability that E K and E L respectively occur in the two successive time 

3 intervals, and wherein a is a predetermined positive real number satisfying a < 1 . 

1 10. The method of claim 9, wherein a is within a range selected from the group consisting of a 

2 first range of 0.50 < a < 1 , a second range of 0.60 < a < 1 , a third range of 0.70 < a < 1 , a fourth 

3 range of 0.80 < a < 1, a fifth range of 0.90 < a < 1, and a sixth range of 0.95 < a < 1 . 

1 11. The method of claim 9, wherein each sequence of the plurality of sequences has a probability 

2 of occurrence no less than p, and wherein p is a predetermined positive real number satisfying p 

3 <a. 

1 12. The method of claim 11, wherein p is within a range selected from the group consisting of a 

2 first range of 0.20 < P < a, a second range of 0.30 < P < a, a third range of 0.40 < p < a, a fourth 

3 range of 0.50 < p < a, a fifth range of 0.60 p < a, and a sixth range of 0.70 < P < a. 
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1 13. A system for associating events, comprising the steps of: 

2 means for providing an event dataset that includes a plurality of events occurring in each 

3 of N successive time intervals, said N^3; 

4 means for deducing, from the event dataset, a plurality of association rules, each 

5 association rule E K =>E L of the plurality of association rules expressing an association between 

6 events E K and E L respectively occurring in two successive time intervals of the N time intervals, 

7 said events E K and E L being in the event dataset; 

8 means for generating a plurality of sequences of events, each sequence of the plurality of 

9 sequences being generated from at least two sequentially ordered association rules of the plurality 

10 of association rules ; 

1 1 means for forming a plurality of clusters from the plurality of sequences in accordance 

12 with a clustering algorithm, each cluster of the plurality of clusters including at least two 

13 sequences of the plurality of sequences; and 

14 means for creating S c sequences of clusters from the plurality of clusters, said S c ^ 1, each 

15 sequence of the S c sequences including at least two clusters of the plurality of clusters. 

1 14. The system of claim 13 , said system further comprising means for using at least one 

2 sequence of the S c sequences to identify at least one event occurring in a first time interval of the 

3 N time intervals as being a probable cause of at least one event occurring in a later-occurring time 

4 interval of the N time intervals. 
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1 15. The system of claim 13 , said system further comprising means for using a first sequence of 

2 the S c sequences to predict an occurrence of at least one event in a time interval occurring after 

3 the N time intervals, wherein the at least one event had occurred within the N time intervals. 

1 16. The system of claim 13 , wherein each pair of sequentially ordered association rules of the 

2 plurality of association rules consists of a first association rule and a second association rule, and 

3 wherein the first association rule and the second association rule are independent of each other. 

1 17. The system of claim 13 , wherein the association rules from which a first sequence of the 

2 plurality of sequences is generated by said means for generating include a pair of consecutively 

3 ordered first and second association rules which are not independent of each other. 

1 1 8. The system of claim 13 , wherein the N time intervals are contiguously sequenced. 

1 19. The system of claim 13 , wherein the N time intervals are not contiguously sequenced. 

1 20. The system of claim 13 , wherein each sequence of the plurality of sequences is of the form E { 

2 -» E 2 E 3 E M Ej in relation to sequentially ordered association rules E } => E 2 , E 2 => E 3 ,..., 

3 E,_, -» E, of the plurality of association rules, and wherein 1^3. 
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21. The system of claim 13 , wherein said each association rule satisfies a condition of a ^ P KL < 
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2 1, wherein P KL is the probability that E K and E L respectively occur in the two successive time 

3 intervals, and wherein a is a predetermined positive real number satisfying a < 1 . 

1 22. The system of claim 21, wherein a is within a range selected from the group consisting of a 

2 first range of 0.50 <, a < 1, a second range of 0.60 <, a < 1, a third range of 0.70 <, a < 1, a fourth 

3 range of 0.80 ^ a < 1 , a fifth range of 0.90 < a < 1 , and a sixth range of 0.95 < a < 1 . 

1 23. The system of claim 21, wherein each sequence of the plurality of sequences has a probability 

2 of occurrence no less than P, and wherein P is a predetermined positive real number satisfying p < 

3 a. 

1 24. The system of claim 23, wherein p is within a range selected from the group consisting of a 

2 first range of 0.20 < p < a, a second range of 0.30 < P < a, a third range of 0.40 < p < a, a fourth 

3 range of 0.50 < p < a, a fifth range of 0.60 p < a, and a sixth range of 0.70 < P < a. 
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1 25. A computer program product comprising a computer usable medium having a computer 

2 readable program embodied therein, said computer readable program adapted to access an event 

3 dataset that includes a plurality of events occurring in each of N successive time intervals, said 

4 computer readable program further adapted execute a method for associating events, said method 

5 comprising the steps of: 

6 deducing from the event dataset a plurality of association rules, each association rule E K 

7 =>E L of the plurality of association rules expressing an association between events E K and E L 

8 respectively occurring in two successive time intervals of the N time intervals, said events E K and 

9 E L being in the event dataset; 

10 generating a plurality of sequences of events, each sequence of the plurality of sequences 

1 1 being generated from at least two sequentially ordered association rules of the plurality of 

12 association rules; 

13 forming a plurality of clusters from the plurality of sequences in accordance with a 

14 clustering algorithm, each cluster of the plurality of clusters including at least two sequences of 

15 the plurality of sequences; and 

16 creating S c sequences of clusters from the plurality of clusters, said S c ^ 1, each sequence 

1 7 of the S c sequences including at least two clusters of the plurality of clusters. 

1 26. The computer program product of claim 25, said method further comprising after the creating 

2 step: using at least one sequence of the S c sequences to identify at least one event occurring in a 

3 first time interval of the N time intervals as being a probable cause of at least one event occurring 
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in a later-occurring time interval of the N time intervals. 



1 27. The computer program product of claim 25, said method further comprising after the creating 

2 step: using a first sequence of the S c sequences to predict an occurrence of at least one event in a 

3 time interval occurring after the N time intervals, wherein the at least one event had occurred 

4 within the N time intervals. 

1 28. The computer program product of claim 25, wherein each pair of sequentially ordered 

2 association rules of the plurality of association rules consists of a first association rule and a 

3 second association rule, and wherein the first association rule and the second association rule are 

4 independent of each other. 

1 29. The computer program product of claim 25, wherein the association rules from which a first 

2 sequence of the plurality of sequences has been generated include a pair of consecutively ordered 

3 first and second association rules which are not independent of each other. 

1 30. The computer program product of claim 25, wherein the N time intervals are contiguously 

2 sequenced. 
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3 1 . The computer program product of claim 25, wherein the N time intervals are not contiguously 
sequenced. 
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1 32. The computer program product of claim 25, wherein each sequence of the plurality of 

2 sequences is of the form E, -> E 2 -> E 3 E,., -» E, in relation to sequentially ordered 

3 association rules E ] => E 2 , E 2 -> E 3 ,... 9 E M => Ej of the plurality of association rules, and wherein I ^ 

4 3. 

1 33. The computer program product of claim 25, wherein said each association rule satisfies a 

2 condition of a <, P KL < 1, wherein P KL is the probability that E K and E L respectively occur in the 

3 two successive time intervals, and wherein a is a predetermined positive real number satisfying a 

4 < 1. 

1 34. The computer program product of claim 33, wherein a is within a range selected from the 

2 group consisting of a first range of 0.50 £ a < 1, a second range of 0.60 < a < 1, a third range of 

3 0.70 < a < 1, a fourth range of 0.80 < a < 1, a fifth range of 0.90 < a < 1, and a sixth range of 0.95 

4 <a<l. 

1 35. The computer program product of claim 33, wherein each sequence of the plurality of 

2 sequences has a probability of occurrence no less than p, and wherein P is a predetermined 

3 positive real number satisfying p < a. 



1 



2 



36. The computer program product of claim 35, wherein P is within a range selected from the 
group consisting of a first range of 0.20 <, P < a, a second range of 0.30 ^ p < a, a third range of 
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3 0.40 <, p < a, a fourth range of 0.50 ^ P < a, a fifth range of 0.60 P <, a, and a sixth range of 0.70 

4 <. P < a. 
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